Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does substantial work: single-use, email-bound, token returned only once, no email is sent, and prior unused invitations for the email are replaced (a destructive side effect). It omits permission/auth mechanics and rate limits, but the side-effect profile is unusually well disclosed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.